Lucene search
+L

1698 matches found

CVE
CVE
added 2021/01/12 8:18 p.m.67 views

CVE-2020-28382

Siemens Solid Edge SE2020/SE2021 (all versions prior to SE2020MP12/SE2021MP2) are affected by a PAR-file parsing vulnerability that can cause an out-of-bounds write, enabling code execution in the context of the affected process. The issue spans Solid Edge SE products and the Solid Edge Viewer, w...

7.8CVSS7.7AI score0.02625EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/01/12 8:18 p.m.67 views

CVE-2020-28384

The CVE-2020-28384 entry affects Siemens Solid Edge: SE2020 (before SE2020MP12) and SE2021 (before SE2021MP2). The root cause is improper validation of user-supplied data when parsing PAR files, leading to a stack-based buffer overflow. This condition could allow code execution in the context of ...

7.8CVSS7.6AI score0.02845EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/01/12 8:18 p.m.62 views

CVE-2020-28381

Siemens Solid Edge PAR file parsing contains an out-of-bounds write due to insufficient input validation, enabling possible remote code execution in the current process. Affected products include Solid Edge SE2020 (< SE2020MP12) and SE2021 (

7.8CVSS7.7AI score0.02621EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2021/01/12 8:18 p.m.79 views

CVE-2020-28383

CVE-2020-28383 affects Siemens JT2Go and Teamcenter Visualization (versions before 13.1.0.1). The vulnerability arises from improper validation of user-supplied data when parsing PAR files, allowing an out-of-bounds write past a memory location, which could enable code execution in the context of...

7.8CVSS7.7AI score0.03439EPSS
SaveExploits0References7Affected Software3
Cvelist
Cvelist
added 2021/01/12 8:18 p.m.35 views

CVE-2020-26989

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Solid Edge SE2020 All Versions SE2020MP12, Solid Edge SE2021 All Versions SE2021MP2, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of PAR files...

7.9AI score0.02833EPSS
SaveExploits0References4
CVE
CVE
added 2021/01/12 8:18 p.m.78 views

CVE-2020-26989

CVE-2020-26989 affects Siemens JT2Go (all versions

7.8CVSS7.8AI score0.02833EPSS
SaveExploits0References4Affected Software3
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.8 views

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes. An unspecified vulnerability exists in Solid Edge, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.02625EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.10 views

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes. An unspecified vulnerability exists in Solid Edge, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.02621EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/01/12 12:0 a.m.10 views

PT-2021-11508 · Siemens · Solid Edge +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.1.0.1 Solid Edge SE2020 versions prior to SE2020MP12 Solid Edge SE2021 versions prior to SE2021MP2 Teamcenter Visualization versions prior to V13.1.0.1 Description: A vulnerability has been identified in the affect...

7.8CVSS7.6AI score0.03439EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.9 views

Schneider Electric EcoStruxure Power Build - Rapsody 代码问题漏洞

Schneider Electric EcoStruxure Power Build-Rapsody is a software for simplifying the configuration of low-voltage distribution panels from Schneider Electric France. A code issue vulnerability exists in EcoStruxure Power Build-Rapsody version V2.1.13 and prior versions, which arises from the...

7.8CVSS7.4AI score0.0347EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.10 views

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes. An unspecified vulnerability exists in Solid Edge, which can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.02845EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/01/12 12:0 a.m.8 views

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes. Solid Edge has a security vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.2AI score0.02625EPSS
SaveExploits0References7
ICS
ICS
added 2021/01/12 12:0 a.m.68 views

Siemens Solid Edge

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: Solid Edge Vulnerabilities: Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow arbitrary code execution on an affected...

7.8CVSS8.5AI score0.03439EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2020/12/07 12:0 a.m.36 views

Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation (cisco-sa-iox-usb-guestshell-WmevScDj)

According to its self-reported version, IOS-XE is affected by a privilege escalation vulnerability due to a vulnerability in the file system on the pluggable USB 3.0 Solid State Drive SSD. An attacker could exploit this vulnerability by removing the USB 3.0 SSD, modifying or deleting files on the...

7.2CVSS7.4AI score0.00324EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:0 a.m.7 views

The vulnerability of Intel SSD microprogramming software, related to insufficient flow management, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel SSD microprogramming software is related to insufficient control over traffic. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

6.7CVSS5.5AI score0.00352EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:0 a.m.7 views

The vulnerability of microprogrammed storage software for Intel SSDs lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of microprogrammed solid-state storage devices like Intel SSDs lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

7.3CVSS5.5AI score0.00329EPSS
SaveExploits0References3Affected Software1
Schneier on Security
Schneier on Security
added 2020/11/13 8:17 p.m.39 views

Inrupt’s Solid Announcement

Earlier this year, I announced that I had joined Inrupt, the company commercializing Tim Berners-Lees Solid specification: The idea behind Solid is both simple and extraordinarily powerful. Your data lives in a pod that is controlled by you. Data generated by your things -- your computer, your...

0.7AI score
SaveExploits0
OSV
OSV
added 2020/11/12 6:15 p.m.5 views

CVE-2020-12309

Insufficiently protected credentialsin subsystem in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...

4.6CVSS5.8AI score0.00329EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/12 6:15 p.m.5 views

CVE-2020-12310

Insufficient control flow managementin firmware in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...

4.6CVSS5.8AI score0.00352EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:0 a.m.9 views

The vulnerability of the Intel SSD Data Center Tool’s management and update tools, related to errors in using standard permissions, allows attackers to escalate their privileges.

The vulnerability of the Intel SSD Data Center Tool, a tool for managing and updating embedded software, is related to errors in the use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

5.2CVSS6.6AI score0.00346EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder